This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hello, I am running an embedded controller with multiple threads and capturing events with SysLog and iprintf so in theory have identical messages generated over the net and the serial port. Ideally they should be the same.

I placed a Wireshark readout alongside the serial readout, and saw that Wireshark had dropped a packet. Is there a limit to the rate at which SysLog messages are captured? I realize this is UDP so there may be dropped packets but its just a home network and have SNMP, SSDP,QUIC,SSDP going on. Is rate of SysLog generation or UDP corruption the most likely cause? Is there any way to make it more robust such as a mutex?

Thanks, Sam

asked 30 Jul '15, 09:26

Sam%20Mallicoat's gravatar image

Sam Mallicoat
6223
accept rate: 0%


Is there a limit to the rate at which SysLog messages are captured?

Yes, it depends on several parameters on your system (CPU speed, IO speed, etc.).

HOWEVER you say, that you are sending the same syslog messages via a serial link. I doubt that the message rate via the serial link is high enough to cause any problems while capturing identical syslog messages sent via the network.

So, either there is real packet loss somewhere in your network OR you are not sending every syslog message via the network (bug in your code, bug in the local syslog implementation, etc.)

Regards
Kurt

permanent link

answered 03 Aug '15, 02:37

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×205
×166
×23
×10

question asked: 30 Jul '15, 09:26

question was seen: 1,856 times

last updated: 03 Aug '15, 02:37

p​o​w​e​r​e​d by O​S​Q​A